I see we have a volunteer for writing the post. Thanks Thomas!

On Mon, Feb 9, 2015 at 12:54 PM, Thomas Faber <[email protected]>
wrote:

> Well, we don't need to be jailbroken, so we can be secure. ;)
>
> Let's fix it, blog about it, and get someone to publish something along
> the lines of "Open Source Windows clone more secure than Windows --
> ReactOS developers fixed vulnerability, but Microsoft's response to the
> same issue still outstanding"
> Everyone wins :D
>
>
> On 2015-02-09 19:37, Alex Ionescu wrote:
> > This would be the win32k 0 day that's been blogged and unfixed in Windows
> > for over 4 years now, and which allows the Surface RT to be jailbroken.
> You
> > really want to fix this? :( What about hackcompat?!
> >
> > Best regards,
> > Alex Ionescu
> >
> > On Sun, Feb 8, 2015 at 12:37 AM, Thomas Faber <[email protected]>
> > wrote:
> >
> >> On 2015-02-07 16:26, [email protected] wrote:
> >>> @@ -792,24 +791,54 @@
> >>>          case UserThreadInitiateShutdown:
> >>>          {
> >>>              ERR("Shutdown initiated\n");
> >>> -            STUB;
> >>> -            Status = STATUS_NOT_IMPLEMENTED;
> >>> +
> >>> +            if (ThreadInformationLength != sizeof(ULONG))
> >>> +            {
> >>> +                Status = STATUS_INFO_LENGTH_MISMATCH;
> >>> +                break;
> >>> +            }
> >>> +
> >>> +            Status = UserInitiateShutdown(Thread,
> >> (PULONG)ThreadInformation);
> >>>              break;
> >>>          }
> >>
> >> This looks like contrary to the other cases, ThreadInformation is
> >> neither probed, nor accessed inside SEH here?
>
>
> _______________________________________________
> Ros-dev mailing list
> [email protected]
> http://www.reactos.org/mailman/listinfo/ros-dev
>
_______________________________________________
Ros-dev mailing list
[email protected]
http://www.reactos.org/mailman/listinfo/ros-dev

Reply via email to